Add access control cross domain